Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
File:                     0EC8EAC7F1F5A216824B37118697748825F314D9.mft (raw, json)
Hash identifier:          CfHt5H97vYaJDLMGNtB5uHk5L7nLyO417wTqfMbZgfc=
Subject key identifier:   EC:72:9F:D9:BA:E0:F4:40:C0:44:6D:2C:A3:AB:C4:7E:14:42:64:61
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       10D3713C8B56AF951FE9BE9316C02078A3C6D374
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
Manifest number:          025D
Signing time:             Sat 12 Jul 2025 10:59:26 +0000
Manifest this update:     Sat 12 Jul 2025 10:54:26 +0000
Manifest next update:     Sun 13 Jul 2025 13:39:26 +0000
Files and hashes:         1: 3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (hash: B4DVZOJ0g/g25JQI7yk7x8x4gKf/cuIQSsPp9MieBj0=)
                          2: 0EC8EAC7F1F5A216824B37118697748825F314D9.crl (hash: 2441UMt76DxeOFuqMqjA97ce2uBwWseSM1UwclGLhXQ=)
                          3: 3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (hash: lnNrO/15v5Up+xLHUBaI6P5PJDjCUyj1TErHNTpWRcs=)
                          4: 3137302e3233392e382e302f32322d3234203d3e203631393432.roa (hash: eAHel6vbDt4pQ6uxfIB8c6WrSWpUeqzllawMiZSYvLA=)
                          5: 3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (hash: ayIs2qlyMksGIgvVvLAYoAWLNyOBWrFORksK3ocaZkk=)
                          6: 34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (hash: QPMfUBmRz5L3sePMOpkMuosZH07qoxzwjbWQgnQ0158=)
                          7: 323830343a313839383a3a2f33322d3430203d3e203631393432.roa (hash: /8UP2mvLRwt8Etr1Lfb8CWcz60KdHvt3HdqSTBA4hEs=)
                          8: 3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (hash: IAKJb6895LglzeIFJuFhf6p0ZD1onjgQpM2wwWDC/t0=)
                          9: 3136382e3139362e37322e302f32322d3234203d3e203631393432.roa (hash: URsF1TfJKyUI6PwfkbJYM5L5YbyJGxfwgg9HVp0/dXc=)
                          10: 3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (hash: VleiHd6QIvkPR54ue3CHrR2dL/OCwTO4yllgXVPtr2s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 13:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d3:71:3c:8b:56:af:95:1f:e9:be:93:16:c0:20:78:a3:c6:d3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Jul 12 10:54:26 2025 GMT
            Not After : Jul 13 13:39:26 2025 GMT
        Subject: CN=EC729FD9BAE0F440C0446D2CA3ABC47E14426461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:c8:ae:c2:88:97:76:b3:21:59:be:58:90:
                    89:9c:c8:3c:3a:1f:35:11:1c:6c:05:21:07:4e:db:
                    49:ed:df:73:ed:cd:9b:fd:9d:03:06:e3:43:b1:5a:
                    fb:ac:2d:a1:51:0c:61:72:15:0d:0b:fd:7b:09:ff:
                    a9:a2:0a:72:7c:47:44:d4:da:c1:00:95:bc:68:49:
                    cb:5a:81:cb:1f:58:e8:ae:24:b0:d6:88:b4:90:f2:
                    e9:f2:59:e6:64:91:94:cb:16:69:38:db:64:c4:37:
                    6d:0e:22:99:f1:7c:d7:fa:71:c9:d3:25:03:2e:a3:
                    9c:ad:00:cd:b1:6f:8c:f8:5a:a4:5c:1d:31:ab:36:
                    40:0a:25:2b:61:f0:8e:9f:f7:7a:1d:c1:94:39:c4:
                    8f:67:fe:32:db:98:df:7c:0e:cc:0e:fb:62:82:21:
                    7b:da:8e:eb:4d:cb:e4:a2:e4:74:1c:74:04:a0:22:
                    b9:57:0b:76:68:ec:e1:d0:da:a8:86:d9:fe:43:ec:
                    94:f4:c9:d6:af:71:c1:b9:3e:0f:78:2b:5d:98:45:
                    14:c6:dd:d5:2f:5b:13:52:aa:24:4a:54:9f:b1:93:
                    b8:5a:34:b4:8d:f2:64:3a:0b:4f:f9:6e:c5:47:ec:
                    a7:64:4a:ff:cf:df:b7:51:02:b3:6d:56:1f:b1:38:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:9F:D9:BA:E0:F4:40:C0:44:6D:2C:A3:AB:C4:7E:14:42:64:61
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:9d:2f:d3:95:0e:5e:22:ea:11:39:6c:66:68:50:0e:ab:
         a8:91:09:4f:9d:26:72:f8:d6:8d:31:fb:64:e8:b2:51:0d:46:
         12:5b:8a:76:f2:0f:92:ff:53:97:5c:a7:15:5d:c7:d4:d5:b4:
         c2:31:42:20:72:24:3a:64:51:a2:54:cc:6d:ed:d4:fd:86:b0:
         10:2c:ef:6e:eb:44:89:b5:c8:08:02:bb:00:d8:b9:1a:bc:82:
         a5:bf:d8:b6:fa:07:66:2a:fa:c6:a3:6c:f9:67:f8:dc:c7:7c:
         60:bc:dd:25:a1:1e:88:d5:2a:52:60:46:83:3a:ea:75:a7:c1:
         e9:ab:e7:a7:1b:01:ba:d9:92:47:d2:4e:f0:55:30:ec:f3:0a:
         3b:ec:03:72:2b:8e:e2:34:95:a3:8b:06:4e:31:09:18:cc:bc:
         76:90:d7:84:39:fb:99:bd:f1:dd:6b:80:38:2b:22:3c:97:b3:
         32:04:2d:84:99:9d:d9:00:83:2a:0a:47:f8:0f:86:7e:0e:3f:
         c4:9e:00:3e:69:08:72:93:b5:1a:23:70:4a:fe:bc:fa:82:70:
         10:5f:4c:5e:2d:a2:a0:41:ab:f0:2c:2c:1f:93:e9:2f:3d:ff:
         8f:f7:b0:0f:f5:23:59:e6:f5:7c:9a:e6:3b:57:e5:4d:b6:ae:
         58:ae:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 15:22:55 2025 by rpki-client